Eric Biggers a1be1f3931 kernel/relay.c: revert "kernel/relay.c: fix potential memory leak" ... This reverts commit ba62bafe94 ("kernel/relay.c: fix potential memory leak"). This commit introduced a double free bug, because 'chan' is already freed by the line: kref_put(&chan->kref, relay_destroy_channel); This bug was found by syzkaller, using the BLKTRACESETUP ioctl. Link: http://lkml.kernel.org/r/20180127004759.101823-1-ebiggers3@gmail.com Fixes: ba62bafe94 ("kernel/relay.c: fix potential memory leak") Signed-off-by: Eric Biggers <ebiggers@google.com> Reported-by: syzbot <syzkaller@googlegroups.com> Reviewed-by: Andrew Morton <akpm@linux-foundation.org> Cc: Zhouyi Zhou <yizhouzhou@ict.ac.cn> Cc: Jens Axboe <axboe@kernel.dk> Cc: <stable@vger.kernel.org> [4.7+] Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2018-02-06 18:32:46 -08:00
..
bpf	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2018-01-31 14:31:10 -08:00
cgroup
configs	Makefile: introduce CONFIG_CC_STACKPROTECTOR_AUTO	2018-02-06 18:32:44 -08:00
debug
events	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2018-01-31 14:31:10 -08:00
gcov
irq	Merge branch 'irq-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2018-02-04 11:41:31 -08:00
livepatch	Merge branch 'for-4.16/remove-immediate' into for-linus	2018-01-31 16:36:38 +01:00
locking	Merge branch 'locking-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2018-01-30 10:44:56 -08:00
power	x86/power: Fix swsusp_arch_resume prototype	2018-02-02 23:33:50 +01:00
printk	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/pmladek/printk	2018-02-01 13:36:15 -08:00
rcu	SCSI misc on 20180131	2018-01-31 11:23:28 -08:00
sched	cpumask: make cpumask_size() return "unsigned int"	2018-02-06 18:32:45 -08:00
time	Merge branch 'misc.poll' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2018-01-30 17:58:07 -08:00
trace	Mostly clean ups and small fixes	2018-02-01 13:15:23 -08:00
.gitignore
acct.c
async.c	kernel/async.c: revert "async: simplify lowest_in_progress()"	2018-02-06 18:32:44 -08:00
audit.c
audit.h
audit_fsnotify.c
audit_tree.c
audit_watch.c
auditfilter.c
auditsc.c
backtracetest.c
bounds.c
capability.c
compat.c	cpumask: make cpumask_size() return "unsigned int"	2018-02-06 18:32:45 -08:00
configs.c
context_tracking.c
cpu.c
cpu_pm.c
crash_core.c
crash_dump.c
cred.c
delayacct.c
dma.c
elfcore.c
exec_domain.c
exit.c
extable.c
fail_function.c
fork.c	kernel/fork.c: add comment about usage of CLONE_FS flags and namespaces	2018-02-06 18:32:45 -08:00
freezer.c
futex.c	pids: introduce find_get_task_by_vpid() helper	2018-02-06 18:32:46 -08:00
futex_compat.c
groups.c
hung_task.c
irq_work.c
jump_label.c	sched/core: Fix cpu.max vs. cpuhotplug deadlock	2018-01-24 10:03:44 +01:00
kallsyms.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/pmladek/printk	2018-02-01 13:36:15 -08:00
kcmp.c
Kconfig.freezer
Kconfig.hz
Kconfig.locks
Kconfig.preempt
kcov.c
kexec.c
kexec_core.c
kexec_file.c
kexec_internal.h
kmod.c
kprobes.c
ksysfs.c
kthread.c
latencytop.c
Makefile
memremap.c
module-internal.h
module.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/pmladek/printk	2018-02-01 13:36:15 -08:00
module_signing.c
notifier.c
nsproxy.c
padata.c
panic.c
params.c
pid.c	pids: introduce find_get_task_by_vpid() helper	2018-02-06 18:32:46 -08:00
pid_namespace.c
profile.c
ptrace.c	pids: introduce find_get_task_by_vpid() helper	2018-02-06 18:32:46 -08:00
range.c
reboot.c
relay.c	kernel/relay.c: revert "kernel/relay.c: fix potential memory leak"	2018-02-06 18:32:46 -08:00
resource.c
seccomp.c	Merge branch 'next-seccomp' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2018-01-31 13:44:45 -08:00
signal.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/livepatching	2018-01-31 13:02:18 -08:00
smp.c
smpboot.c
smpboot.h
softirq.c
stacktrace.c
stop_machine.c
sys.c
sys_ni.c
sysctl.c	mm, hugetlb: remove hugepages_treat_as_movable sysctl	2018-01-31 17:18:37 -08:00
sysctl_binary.c
task_work.c
taskstats.c	pids: introduce find_get_task_by_vpid() helper	2018-02-06 18:32:46 -08:00
test_kprobes.c
torture.c
tracepoint.c
tsacct.c
ucount.c
uid16.c
umh.c
up.c
user-return-notifier.c
user.c
user_namespace.c
utsname.c
utsname_sysctl.c
watchdog.c
watchdog_hld.c
workqueue.c	Staging/IIO patches for 4.16-rc1	2018-02-01 09:51:57 -08:00
workqueue_internal.h